Cyber alerts

135 results

June 2025

Published Wednesday 18 June 2025 (04:29) (updated 19 June 2025)

Proof-of-Concept Exploit Released for Pre-Auth RCE Chain in Sitecore Experience Platform

Security researchers have released a technical writeup which, with minimal modification, serves as a proof-of-concept exploit that could allow unauthenticated remote attackers to execute arbitrary code

CC-4671 Medium

Published Wednesday 18 June 2025 (11:44) (updated 18 June 2025)

Veeam Releases Security Updates for Backup & Replication and Windows Agent

Security bulletin addresses critical severity vulnerabilities that could allow for remote code execution and privilege escalation

CC-4670 High

Published Tuesday 17 June 2025 (04:13) (updated 18 July 2025)

Citrix Releases Critical Security Updates for NetScaler ADC and NetScaler Gateway

Exploitation could allow attackers to read memory from NetScaler Gateway or AAA virtual server, potentially exposing sensitive information such as session tokens. CVE-2025-5777 is similar to CitrixBleed (CVE-2023-4966).

CC-4669 Medium

Published Friday 13 June 2025 (12:23) (updated 13 June 2025)

Active Exploitation of Critical RCE Vulnerability in Wazuh

CVE-2025-24016 could allow a remote, authenticated attacker to execute arbitrary Python code on the Wazuh server

CC-4668 Medium

Published Thursday 12 June 2025 (11:58) (updated 12 June 2025)

Mitel Releases Security Advisory for MiCollab

Critical path traversal vulnerability could allow a remote unauthenticated attacker to perform unauthorised administrative actions

CC-4667 Medium

Published Wednesday 11 June 2025 (01:52) (updated 11 June 2025)

MicroDicom Releases Security Update for DICOM Viewer

CVE-2025-5943 could allow a remote unauthenticated attacker to execute arbitrary code on affected installations of DICOM Viewer

CC-4666 Medium

Published Wednesday 11 June 2025 (01:29) (updated 21 October 2025)

Microsoft Releases June 2025 Security Updates

Scheduled updates for Microsoft products, including security updates for 66 vulnerabilities, of which 1 has been reported as actively exploited.

CC-4665 Medium

Published Wednesday 11 June 2025 (11:25) (updated 11 June 2025)

ConnectWise Releases Update to Rotate Code Signing Certificates for ScreenConnect, Automate and RMM

ConnectWise has advised users of ScreenConnect or Automate "must update to the latest build and validate that all agents are updated before 13 June at 8:00pm ET [14 June at midnight UTC] to avoid disruptions or degraded experience."

CC-4664 Medium

Published Thursday 5 June 2025 (02:55) (updated 5 June 2025)

Cisco Releases Security Advisory Affecting Cisco Identity Service Engine

Advisory addresses a critical severity vulnerability in Cisco Identity Service Engine

CC-4663 Medium

Published Wednesday 4 June 2025 (02:29) (updated 11 June 2025)

Roundcube Releases Security Updates for Webmail

Security update addresses a critical severity security vulnerability in Roundcube Webmail